Airbyte Panel Detection

Detects Airbyte open-source data integration panel and health API. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Airbyte data integration panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Airbyte Panel...

Open Akamai ARL - Cross-Site Scripting Detection

Open Akamai ARL contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """Open Akamai ARL contains a cross-site scripting vulnerability.""" from...

WordPress Age Gate <2.13.5 - Open Redirect Detection

WordPress Age Gate plugin before 2.13.5 contains an open redirect vulnerability via the wphttpreferer parameter after certain actions and after invalid or missing nonces. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

Eleanor CMS - Open Redirect Detection

Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERYSTRING. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in go.""" import re from kittysploit import fro...

Orchard 'ReturnUrl' Parameter URI - Open Redirect Detection

Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.21, 1.1.x before 1.1.31, 1.2.x before 1.2.42, and 1.3.x before 1.3.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the ReturnUrl parameter. !/usr/bin/env...

WordPress StageShow <5.0.9 - Open Redirect Detection

WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshowredirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter. !/usr/bin/env python3 -- coding:...

Novius OS 5.0.1-elche - Open Redirect Detection

Novius OS 5.0.1 Elche allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to admin/nos/login. !/usr/bin/env python3 -- coding: utf-8 -- """Novius OS 5.""" import re from kittysploit import from...

WordPress Toolbar <= 2.2.6 - Open Redirect Detection

The plugin redirects to any URL via the "wptbto" parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env python3 -- coding: utf-8 -- """The plugin redirects to any...

Mosparo < 1.0.2 - Open Redirect Detection

Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in GitHub repository mosparo/mosparo prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

Payment Gateway for Telcell < 2.0.4 - Open Redirect Detection

The plugin does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue !/usr/bin/env python3 -- coding: utf-8 -- """The plugin does not validate the apiurl parameter before redirecting the user to its value, leading to an Ope.""" import re fr...

Travelpayouts <= 1.1.16 - Open Redirect Detection

The plugin is vulnerable to Open Redirect due to insufficient validation on the travelpayoutsredirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. !/usr/bin/env python...

GnuBoard5 5.5.16 - Open Redirect Detection

Gnuboard5 5.5.16 contains an open redirect vulnerability caused by insufficient URL parameter verification in bbs/logout.php, letting remote attackers redirect users to arbitrary URLs, exploit requires crafted URL parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Gnuboard5 5.""" import re...

GPT Academic v1.3.9 - Open Redirect Detection

An open redirect vulnerability exists in GPT Academic v1.3.9, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python3 -- codin...

XWiki - Open Redirect Detection

XWiki Platform is vulnerable to open redirect attacks due to improper validation of the xredirect parameter. This allows an attacker to redirect users to an arbitrary website. The vulnerability is patched in versions 14.10.4 and 15.0. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is...

ILIAS eLearning <7.16 - Open Redirect Detection

ILIAS eLearning before 7.16 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """ILIAS eLearning before 7.""" import...

Stable Diffusion Webui 1.10.0 - Open Redirect Detection

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. !/usr/bin/env python...

Kaseya Virtual System Administrator - Open Redirect Detection

Kaseya Virtual System Administrator 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 are susceptible to an open redirect vulnerability. An attacker can redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. !/usr/bin/env...

Xsuite <=2.4.4.5 - Open Redirect Detection

Xsuite 2.4.4.5 and prior contains an open redirect vulnerability, which can allow a remote attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the redirurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Xsuite 2.""" import re from...

Forescout CounterACT 6.3.4.1 - Open Redirect Detection

Open redirect vulnerability in assets/login on the Forescout CounterACT NAC device before 7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 'a' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open redirect vulnerability in...

WordPress Brandfolder - Open Redirect (RFI & LFI) Detection

WordPress Brandfolder is vulnerable to remote/local file inclusion and allows remote attackers to inject an arbitrary URL into the 'callback.php' endpoint via the 'wpabspath' parameter which will redirect the victim to it. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Brandfolder is...